CVE-2005-3004

SQL injection vulnerability in Interakt MX Shop 3.2.0 allows remote attackers to execute arbitrary SQL commands via the 1 idp, 2 idctg, or 3 idprd parameters to the pages module in index.php...

CVE-2005-3004

CVE-2005-3004 describes a SQL injection in Interakt MX Shop 3.2.0. The vulnerability is in the pages module of index.php, exploitable via the parameters (1) idp, (2) id_ctg, or (3) id_prd. The affected product is Interakt MX Shop 3.2.0. The documented impact is the ability to execute arbitrary SQ...

CVE-2005-3004: Undefined Security Weakness

SQL injection vulnerability in Interakt MX Shop 3.2.0 allows remote attackers to execute arbitrary SQL commands via the 1 idp, 2 idctg, or 3 idprd parameters to the pages module in index.php...

I want to see the code to crack the encrypted pages of the text had the brilliant idea-vulnerability warning-the black bar safety net

font face=Verdanabelieve that most people's machines are equipped with one or more of text, web page editing software, such as:powerful premium software, Dreamweaver MX, Word XP, the system comes with relatively low-level software, NotePad, And WordPad for. And these software exist between the...

CVE-2004-2330

Technical details about CVE-2004-2330 are not publicly provided in the supplied documents; no specific vulnerable components, versions beyond ColdFusion MX 6.1/6.1 J2EE are described here. Monitor for updates.

CVE-2004-2331

Summary of CVE-2004-2331 (ColdFusion MX 6.1 / 6.1 J2EE): Local users could bypass sandbox security and access sensitive information by using Java reflection to reach trusted Java objects without invoking CreateObject or the cfobject tag. The issue affects ColdFusion MX 6.1 and ColdFusion MX 6.1 J...

CVE-2004-2330: Undefined Security Weakness

ColdFusion MX 6.1 and 6.1 J2EE allows remote attackers to cause a denial of service via an HTTP request containing a large number of form fields...

CVE-2004-2331: Use of Externally-Controlled Input to Select Classes or Code

ColdFusion MX 6.1 and 6.1 J2EE allows local users to bypass sandbox security restrictions and obtain sensitive information by using Java reflection methods to access trusted Java objects without using the CreateObject function or cfobject tag...

CVE-2005-2306

Race condition in Macromedia JRun 4.0, ColdFusion MX 6.1 and 7.0, when under heavy load, causes JRun to assign a duplicate authentication token to multiple sessions, which could allow authenticated users to gain privileges as other users...

CVE-2005-2306: Undefined Security Weakness

Race condition in Macromedia JRun 4.0, ColdFusion MX 6.1 and 7.0, when under heavy load, causes JRun to assign a duplicate authentication token to multiple sessions, which could allow authenticated users to gain privileges as other users...

[SA16081] Macromedia JRun Authentication Token Security Issue

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2002-1992

The CVE-2002-1992 entry concerns ColdFusion MX: a buffer overflow in jrun.dll when ColdFusion runs with IIS 4/5, enabling remote denial of service via either a long template file name or a long HTTP header. Affected software is ColdFusion MX (jrun.dll) on IIS environments. The underlying cause is...

CVE-2002-1992

Buffer overflow in jrun.dll in ColdFusion MX, when used with IIS 4 or 5, allows remote attackers to cause a denial of service in IIS via 1 a long template file name or 2 a long HTTP header...

CVE-2002-1992: Undefined Security Weakness

Buffer overflow in jrun.dll in ColdFusion MX, when used with IIS 4 or 5, allows remote attackers to cause a denial of service in IIS via 1 a long template file name or 2 a long HTTP header...

CVE-2004-2204

Macromedia ColdFusion MX 6.0 and 6.1 application server is affected when running with CreateObject or CFOBJECT enabled, allowing local users to perform unauthorized activities and potentially obtain administrative passwords by creating CFML scripts that leverage those features. The reports do not...

CVE-2004-2204: Undefined Security Weakness

Macromedia ColdFusion MX 6.0 and 6.1 application server, when running with the CreateObject function or CFOBJECT tag enabled, allows local users to conduct unauthorized activities and obtain administrative passwords by creating CFML scripts that use CreateObject or CFOBJECT...

CVE-2002-1700

CVE-2002-1700 describes a cross-site scripting (XSS) flaw in the missing template handler of Macromedia ColdFusion MX. The vulnerability arises because the HTTP request parameter for the template name is not filtered, allowing an attacker to inject script that is echoed in a 404 error message and...

CVE-2002-1700: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability XSS in the missing template handler in Macromedia ColdFusion MX allows remote attackers to execute arbitrary script as other users by injecting script into the HTTP request for the name of a template, which is not filtered in the resulting 404 error message...

CVE-2005-1555

CVE-2005-1555 affects the JRun Web Server component of ColdFusion MX 7.0. The vulnerability is a cross-site scripting (XSS) flaw where an attacker can inject arbitrary script or HTML through the request URL because the URL is not properly quoted in the server’s default 404 error page. This is a c...

CVE-2005-1555: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the JRun Web Server in ColdFusion MX 7.0 allows remote attackers to inject arbitrary script or HTML via the URL, which is not properly quoted in the resulting default 404 error page...